[package] iptables: add comment match to the core package